01 Record

CVE-2026-73846

CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning

MediumPUBLISHEDCNA: GitHub_M

Base score6.5 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

02 Description

CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning

Published: 2026-08-14 16:56Z1 HR AGO
Last updated: 2026-08-14 16:56Z1 HR AGO
Reserved: 2026-08-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Medium (CVSS 6.5)
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
Weaknesses: CWE-345 CWE-436
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 897e0ba4afd71e51890b5ed83433ef812a14628a7af8ff3e85858faba7990f3f

VendorProductVersionsPlatforms

ondatackan-mcp-server< 0.4.112—